Problems with Virus in a Bounce message ?

[Julian Field]

How old is your copy of MailScanner? In the most recent versions I have
made the MIME attachment extraction more robust to handle this situation
better.

At 13:41 07/04/2004, you wrote:
>Hi List,
>
>now I have a new scenario with my virusscanners.
>On the first host is Mailscanner installed and routes
>every mail after scanning to a second one with amavisd-new
>which scans the mail again.
>Sometimes viruses gets through. Here's a report of
>amavisd-new with the statement of Mailscanner
>"Found to be clean" (pns = Mailscanner, sns = amavisd-new):
>------------------------- BEGIN HEADERS -----------------------------
>Return-Path: <>
>Received: from pns.maxonline.de (pns.maxonline.de [81.24.64.2])
>  by sns.maxonline.de (Postfix) with ESMTP id BAABA421FE3
>  for <XXX>; Mon,  5 Apr 2004 14:09:08 +0200 (CEST)
>Received: from host.domain.tld (abitz.customer.loomes.de [212.40.165.111])
>  by pns.maxonline.de (Postfix) with ESMTP id 8B4F2581CD
>  for <XXX>; Mon,  5 Apr 2004 14:09:07 +0200 (CEST)
>Received: by host.domain.tld (Postfix)
>  id 0309BFA86; Mon,  5 Apr 2004 13:53:59 +0200 (CEST)
>Date: Mon,  5 Apr 2004 13:53:59 +0200 (CEST)
>From: MAILER-DAEMON at domain.tld (Mail Delivery System)
>Subject: Undelivered Mail Returned to Sender
>To: XXX
>MIME-Version: 1.0
>Content-Type: multipart/report; report-type=delivery-status;
>  boundary="E5B2BFA5C.1081166039/host.domain.tld"
>Message-Id: <20040405115359.0309BFA86 at host.domain.tld>
>X-Virus-Status: Found to be clean
>
>
>Any Ideas ? Virus was Sober.F, the mail was quarantined if
>you want the complete one.
>
>- Michael

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654